RA Webservice: NTLM Proxy authentication fails

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

When using proxy-authentication inside a Web Service Rest  connection object, the authentication fails with below exception:

2020-09-30 11:53:11             pool-1-thread-13: REST: Sep 30, 2020 11:53:11 AM org.apache.commons.httpclient.HttpMethodDirector executeConnect
SEVERE: Credentials cannot be used for NTLM authentication: org.apache.commons.httpclient.UsernamePasswordCredentials
org.apache.commons.httpclient.auth.InvalidCredentialsException: Credentials cannot be used for NTLM authentication: org.apache.commons.httpclient.UsernamePasswordCredentials

...

2020-09-30 11:53:11             pool-1-thread-13: REST: Sep 30, 2020 11:53:11 AM org.apache.commons.httpclient.HttpMethodDirector processProxyAuthChallenge
INFO: Failure authenticating with NTLM <any realm>@proxy.domain:8080

 

A different combinations of Username like domain\username or username and Realm in the connection object did not succeed.

 

Example of the connection object used in the Jobs WebService:

 

Environment

Release : any version

Component : RA Web Service Rest / Soap Agents

 

Cause

Proxy server configuration: the proxy server would not accept any incoming authentication request to exit to the Internet coming from a Production Server.

Resolution

Please consult with the Proxy Administrators to review the Proxy Logs and see why the authentication request is forbidden or if the username / realm parameters are correct.

In most occasions, a modification in the Proxy server configuration will need to be performed to allow an internal server to go to the Internet.